Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JiRZgNMvK2gW_MtDnXrzNuPnfU0.roa
File: JiRZgNMvK2gW_MtDnXrzNuPnfU0.roa (raw, json)
Hash identifier: yJLL/sdiFpsfqYqqYpsjMdWYQrtKo3oUkWr67K+GFiA=
Subject key identifier: 26:24:59:80:D3:2F:2B:68:16:FC:CB:43:9D:7A:F3:36:E3:E7:7D:4D
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0195CEE02252946997B786B0D1E148903AE7
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JiRZgNMvK2gW_MtDnXrzNuPnfU0.roa
Signing time: Tue 25 Mar 2025 19:55:50 +0000
ROA not before: Tue 25 Mar 2025 19:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0c:ac7::/32 maxlen: 32
2a12:1542::/32 maxlen: 32
2a12:7302::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:e0:22:52:94:69:97:b7:86:b0:d1:e1:48:90:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 25 19:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26245980d32f2b6816fccb439d7af336e3e77d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:44:f8:a1:65:d3:90:4c:44:77:b4:1a:d0:
0b:53:32:3f:18:57:86:dd:cf:18:c8:e3:62:38:37:
fa:34:8b:f7:54:18:21:3d:18:c7:cf:81:dc:15:f4:
3f:ae:99:af:52:5c:a5:5a:5f:12:d2:eb:7d:b8:c9:
32:80:1c:3d:f8:17:bd:d1:8b:6b:df:62:e4:22:e9:
11:ec:e2:25:7a:36:8f:85:e4:af:b8:ec:fd:e5:7c:
9d:98:b8:87:36:aa:a3:0c:a4:51:ae:30:02:1d:9c:
48:3e:e5:89:b6:55:64:4b:17:d6:df:20:47:53:b3:
23:92:a9:f8:37:5a:f7:c2:32:91:c0:05:d9:2a:0f:
7e:2a:69:ec:57:09:61:ee:1e:6f:e6:20:fa:31:1e:
d3:df:9d:fc:de:33:1c:ab:79:f6:96:71:cf:a5:36:
20:3a:6f:ea:6b:6a:e0:1b:86:97:b5:30:2b:5b:2a:
cd:64:35:9d:0e:3a:10:95:c2:c2:39:e2:a3:59:70:
b9:18:72:a8:92:44:dd:db:7f:53:ba:99:1c:5a:b4:
08:2e:88:11:b9:75:8f:92:77:35:b0:11:8e:b3:4c:
18:1b:59:1d:e6:f0:76:78:74:73:b4:dc:d5:6e:35:
b2:f1:6b:db:6e:44:a0:fd:ff:22:23:ef:8b:20:6f:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:59:80:D3:2F:2B:68:16:FC:CB:43:9D:7A:F3:36:E3:E7:7D:4D
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JiRZgNMvK2gW_MtDnXrzNuPnfU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ac7::/32
2a12:1542::/32
2a12:7302::/32
Signature Algorithm: sha256WithRSAEncryption
36:d3:53:cf:09:4c:d8:dc:15:bf:f5:2d:29:04:b4:56:4f:e2:
e3:d6:a1:16:ae:84:b3:92:fb:c0:8c:b8:fd:93:95:08:49:5a:
99:4e:50:01:ba:ae:c0:7f:c4:06:02:4d:66:d8:40:5c:d1:1d:
44:55:40:65:0b:29:93:92:07:9e:c5:55:e9:c0:59:ba:30:04:
b2:ce:b2:45:57:9b:b9:83:5e:20:77:42:4e:49:b5:88:80:41:
bf:af:0d:eb:3f:f8:d9:1a:48:75:77:2c:9c:1e:63:31:bf:5b:
1f:a9:9d:ba:16:c7:21:93:9e:11:bc:a4:e2:94:84:13:b8:eb:
9f:a0:eb:1a:c3:f4:92:96:34:04:07:ba:1b:ca:bb:d5:e5:ef:
93:6b:8a:ee:df:e9:87:a2:52:4c:c9:23:1d:0d:5b:4d:f6:1d:
8e:b5:fe:ac:f5:40:9a:86:b6:ff:be:d2:9c:11:3c:7e:4c:73:
fd:18:a1:0e:2e:b5:06:c5:e1:4d:b0:e2:11:68:ed:19:96:9b:
73:94:20:49:e6:ed:24:2e:e5:e8:6e:21:46:4a:64:c6:5d:3d:
72:79:23:ce:19:14:bd:c9:bb:3b:9b:b1:c6:84:71:6c:56:f0:
29:52:a0:f9:11:08:84:61:ec:6d:be:88:d1:e8:d2:79:0c:43:
db:e5:ed:e0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZXO4CJSlGmXt4aw0eFIkDrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjUwMzI1MTk1NTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjI0NTk4MGQzMmYyYjY4MTZmY2NiNDM5ZDdhZjMzNmUzZTc3ZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApShE+KFl05BMRHe0GtALUzI/GFeG
3c8YyONiODf6NIv3VBghPRjHz4HcFfQ/rpmvUlylWl8S0ut9uMkygBw9+Be90Ytr
32LkIukR7OIlejaPheSvuOz95XydmLiHNqqjDKRRrjACHZxIPuWJtlVkSxfW3yBH
U7Mjkqn4N1r3wjKRwAXZKg9+KmnsVwlh7h5v5iD6MR7T35383jMcq3n2lnHPpTYg
Om/qa2rgG4aXtTArWyrNZDWdDjoQlcLCOeKjWXC5GHKokkTd239TupkcWrQILogR
uXWPknc1sBGOs0wYG1kd5vB2eHRztNzVbjWy8WvbbkSg/f8iI++LIG8GrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCYkWYDTLytoFvzLQ5168zbj531NMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvSmlSWmdOTXZLMmdXX010RG5YcnpOdVBuZlUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKgwKxwMF
ACoSFUIDBQAqEnMCMA0GCSqGSIb3DQEBCwUAA4IBAQA201PPCUzY3BW/9S0pBLRW
T+Lj1qEWroSzkvvAjLj9k5UISVqZTlABuq7Af8QGAk1m2EBc0R1EVUBlCymTkgee
xVXpwFm6MASyzrJFV5u5g14gd0JOSbWIgEG/rw3rP/jZGkh1dyycHmMxv1sfqZ26
Fschk54RvKTilIQTuOufoOsaw/SSljQEB7obyrvV5e+Ta4ru3+mHolJMySMdDVtN
9h2Otf6s9UCahrb/vtKcETx+THP9GKEOLrUGxeFNsOIRaO0ZlptzlCBJ5u0kLuXo
biFGSmTGXT1yeSPOGRS9ybs7m7HGhHFsVvApUqD5EQiEYextvojR6NJ5DEPb5e3g
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:48 2025 by rpki-client